Last updated: June 22, 2025

This Privacy Policy describes how Kiwis.lk (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit or transact on kiwis.lk (“Site”), contact us, or use our services.

1. Information We Collect

A. Information You Provide

  • Name, email, phone, shipping & billing address, password
  • Order details and payment confirmations
  • Support requests, messages, photos, or complaint forms

B. Automatically Collected Data

  • Usage data: IP address, browser, device type, pages viewed
  • Cookies, pixels, and similar tracking tools

C. From Third Parties

  • Payment processors, shipping services, analytics providers, marketing partners
  • Tracking services like Google Analytics, Facebook Pixel

2. How We Use Your Information

  • To process orders, payments, shipments, refunds, and returns
  • To provide customer support and respond to inquiries
  • To send you marketing communications with your permission
  • To prevent fraud and enforce Site security
  • To improve Site performance and user experience

3. How We Share Your Information

  • With service providers for payments, shipping, analytics, hosting, support
  • With marketing partners if you have opted in
  • If required by law or court order
  • In connection with business transactions like M&A or insolvency

We do not sell your personal data.

4. Cookies & Tracking

We use cookies and similar technologies to maintain your session, preferences, run analytics, and serve ads. You can manage or block cookies via your browser—but this may impact Site functionality.

5. Data Security & Retention

  • We protect your data with encryption (TLS/SSL) and access controls
  • We retain data only as long as needed: e.g., for order processing, legal compliance, or account maintenance

6. Your Rights (PDPA)

Under Sri Lanka’s Personal Data Protection Act No. 9 of 2022, you may have the right to:

  • Access your data
  • Correct inaccuracies
  • Delete data (subject to legal obligations)
  • Restrict or object to processing
  • Withdraw consent at any time
  • Receive data portability
  • File a complaint with us or the Sri Lankan Data Protection Authority

The PDPA follows many GDPR principles and took effect in phases throughout 2023–2025 .

7. Children

We do not knowingly collect data from individuals under 16. If you believe we have such data, contact us to request its removal.

8. International Transfers

Data may be transferred outside Sri Lanka for services like payments or hosting. We ensure transfers comply with PDPA safeguards .

9. Policy Updates

We may update this policy; changes are effective upon posting with date revision. For material changes, you will receive notices via email or Site banner.

10. Contact Us

For privacy inquiries or to exercise your rights:

  • Email: support@kiwis.lk
  • Phone: +94 70 210 7171
  • Address: 221 Neelammahara, Boralesgamuwa, Sri Lanka